Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
File: 3zt208DGDWY1BqJSZxxSjjQ5_3U.mft (raw, json)
Hash identifier: kxxTWHLp46qQN/4JJLqfyxeSj5iy9EwD9T81uyvC4RE=
Subject key identifier: 72:0C:21:63:BF:89:B8:DE:85:C6:F3:20:4A:FF:30:B1:F4:D0:46:FD
Authority key identifier: DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
Certificate issuer: /CN=df3b76d3c0c60d663506a252671c528e3439ff75
Certificate serial: 01A0C858D3F2F37451A3E072DB6C486BEC8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
Manifest number: 1A08
Signing time: Tue 22 Sep 2026 09:00:59 +0000
Manifest this update: Tue 22 Sep 2026 09:00:59 +0000
Manifest next update: Wed 23 Sep 2026 09:00:59 +0000
Files and hashes: 1: 3zt208DGDWY1BqJSZxxSjjQ5_3U.crl (hash: rJGt3SCIsdaeYz3hA1eVqbIan3qkKE3iX2mpEvwJIJ0=)
2: zw3c904rq4xChP-j73nfIGIlebY.roa (hash: KMDvgbQdyiONiqKh0BKewAjFO3rlCRJWvQUeCqo5FZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:d3:f2:f3:74:51:a3:e0:72:db:6c:48:6b:ec:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df3b76d3c0c60d663506a252671c528e3439ff75
Validity
Not Before: Sep 22 09:00:59 2026 GMT
Not After : Sep 23 09:00:59 2026 GMT
Subject: CN=720c2163bf89b8de85c6f3204aff30b1f4d046fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:4b:78:cf:5d:a4:e1:80:21:1b:6f:d4:b3:73:
1d:96:97:22:bb:51:0f:cf:82:a9:0a:94:9d:64:24:
81:c4:59:00:33:c9:f9:8f:2a:12:1b:4c:d3:e5:f1:
2f:33:20:06:e3:db:5c:fe:4f:1b:b0:3d:2d:c1:07:
2c:d6:8d:8a:9e:e3:11:b8:27:ad:8b:db:6e:7e:f2:
a1:a8:62:c0:ca:24:ac:55:31:e0:5f:7c:29:4d:49:
3a:93:92:a4:eb:c5:38:16:72:fe:e4:b2:13:31:a9:
ca:a0:4f:ca:09:a9:cf:2e:32:8c:f7:4c:ba:f9:27:
a4:4c:bf:a2:55:f6:94:f6:66:87:0a:3a:17:6e:88:
cd:a6:07:14:d5:0e:26:9b:d3:ab:89:59:77:2b:aa:
d5:0f:ac:37:6d:aa:fb:c1:8c:ff:81:98:3c:48:e0:
eb:e4:dc:10:a6:f5:d5:5f:72:06:c5:17:bd:ca:14:
0f:7d:1a:88:b4:ef:8a:ff:c6:4b:e6:00:ae:71:21:
91:72:13:6f:67:3d:9b:4e:57:99:53:a8:67:00:33:
7d:ac:5b:be:d8:1b:ee:f2:4c:77:36:f2:64:7f:dd:
c3:1c:9e:62:7e:60:f1:3a:80:db:bc:92:1d:c9:98:
f2:1d:c3:4b:87:a4:fa:4f:39:1d:11:d7:f3:68:49:
15:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0C:21:63:BF:89:B8:DE:85:C6:F3:20:4A:FF:30:B1:F4:D0:46:FD
X509v3 Authority Key Identifier:
keyid:DF:3B:76:D3:C0:C6:0D:66:35:06:A2:52:67:1C:52:8E:34:39:FF:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3zt208DGDWY1BqJSZxxSjjQ5_3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/a2c9ac-f3ca-4adc-9586-d9e1137f02b5/1/3zt208DGDWY1BqJSZxxSjjQ5_3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:30:68:ef:a5:16:36:7f:09:a1:a2:d9:55:2d:32:16:cc:aa:
0e:e6:a3:6b:66:50:a8:e0:33:ff:aa:dc:95:1f:dc:9f:8a:51:
ff:d0:55:45:91:46:48:fa:cd:c3:3d:2d:db:44:b4:d8:8b:f0:
be:8f:7d:bf:e9:ca:f2:a0:00:97:50:a5:f5:98:f5:7d:5d:c9:
de:46:31:05:d5:be:7f:e6:86:93:30:bf:08:f7:3c:df:1b:e4:
fe:f5:f4:94:14:72:ad:05:bc:d7:d8:30:88:dd:32:1b:00:7b:
3d:de:fa:67:b0:8c:05:05:31:cc:a3:2b:34:d8:e1:2b:73:d4:
8a:b5:a5:b5:74:fd:eb:0e:29:10:a6:d3:61:76:b9:71:77:ff:
3f:75:98:e9:c9:92:27:20:f8:e8:e6:55:de:11:4e:99:f2:68:
05:3c:17:93:7b:c7:a0:cd:6c:ca:0b:7c:c8:9c:06:fe:21:3f:
c7:98:58:41:ac:cf:01:24:39:fb:3d:50:88:8b:ec:0f:fd:a8:
4b:e6:80:57:56:83:30:eb:22:72:09:3a:f2:eb:eb:8b:a0:5b:
2e:78:6c:0b:18:f5:bb:e9:8e:65:21:65:ab:48:9c:03:b8:72:
16:80:ca:64:61:22:26:24:35:db:1d:bb:bf:7e:92:a0:c8:e0:
96:d1:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:00:37 2026 by rpki-client